$ rpki-client -vvvf rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft File: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft (raw, json) Hash identifier: tIELITZwUA9IUDVacjRV25UY2KL2qyDwmSROMUVx/7Y= Subject key identifier: E3:BF:32:73:BF:2E:F5:09:49:8C:3A:3F:E2:D0:51:7A:55:98:EA:23 Authority key identifier: B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85 Certificate issuer: /CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685 Certificate serial: 54E8C0914023C38E77E5B4CF62FF2B1500B3D692 Authority info access: rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer Subject info access: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft Manifest number: BF Signing time: Mon 21 Sep 2026 22:55:00 +0000 Manifest this update: Mon 21 Sep 2026 22:50:00 +0000 Manifest next update: Wed 23 Sep 2026 02:23:00 +0000 Files and hashes: 1: 3130332e3138372e3232362e302f32332d3234203d3e20313439373238.roa (hash: sTfiDvuvbkVeyTPfpKYSFsI9nMpAT34o8x5bhe0xkFw=) 2: 3130332e3138372e3232362e302f32342d3234203d3e20313439373238.roa (hash: SMAdsArRGPYxDZsZ/CCe6hdzjIJy0KvpAA+wvauroZY=) 3: B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl (hash: uDulSVZgZIOa/EMlGX8Es0aIJ/36JMkJQO5cyLwBwHU=) 4: 3130332e3138372e3232372e302f32342d3234203d3e20313439373238.roa (hash: ksYVDZOsUaPH9h3h6FXJXhC94WZiPEsTowZUMKAvBn0=) Validation: OK Signature path: rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.crl rsync://rpki-rsync.idnic.net/repo/IDNIC/1/419A85CDF8A430516946869D1C492037D6BC6E9E.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QZqFzfikMFFpRoadHEkgN9a8bp4.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Wed 23 Sep 2026 02:23:00 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 54:e8:c0:91:40:23:c3:8e:77:e5:b4:cf:62:ff:2b:15:00:b3:d6:92 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685 Validity Not Before: Sep 21 22:50:00 2026 GMT Not After : Sep 23 02:23:00 2026 GMT Subject: CN=E3BF3273BF2EF509498C3A3FE2D0517A5598EA23 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:4a:82:13:8a:5b:8f:bf:a0:e4:ef:51:69:42: 6a:21:2d:24:b8:1d:a3:8f:db:e3:d1:8f:d6:52:33: d3:11:1a:25:b7:46:5b:64:12:52:85:8e:ae:0e:58: e2:1c:88:e3:82:5b:2f:f6:00:b2:3a:87:31:5a:10: 9a:25:75:3d:72:fd:9c:31:0b:6a:d2:72:dc:77:eb: 7d:0a:4f:e5:a7:ff:b7:b8:7a:b0:9c:38:60:20:70: 92:14:c2:6e:75:06:bf:8c:89:8e:14:54:4e:cb:b2: 1b:d7:55:09:6b:4a:a1:6e:60:f9:78:ba:c2:78:48: df:c9:8a:41:1f:c2:d3:84:e5:5f:5b:93:63:85:ea: 1d:23:67:ba:00:c4:b0:d6:c0:8f:87:b8:e9:8c:bd: 12:cf:1b:dc:b5:b9:53:8d:08:8a:0e:de:38:f6:72: 2c:eb:6c:a1:0d:1f:56:92:8d:87:52:67:60:0e:92: f6:78:0b:49:3b:7d:48:8c:d3:39:b6:f1:7c:8a:95: a2:66:4f:a4:c9:d1:f9:0e:ae:4b:d4:6a:2f:34:f3: 30:f1:aa:a5:22:f2:46:b3:b0:c6:4e:e7:48:37:1b: 14:43:b3:a1:57:1c:2f:0e:c6:63:0c:fb:c8:09:df: c4:af:96:0d:d9:a1:2a:d6:11:a8:6e:af:d4:23:77: 3b:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E3:BF:32:73:BF:2E:F5:09:49:8C:3A:3F:E2:D0:51:7A:55:98:EA:23 X509v3 Authority Key Identifier: keyid:B2:B4:8A:9C:04:8B:51:CD:13:3A:D0:AE:E6:F5:F9:EB:73:DA:16:85 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rsync.idnic.net/repo/IDNIC/1/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.cer Subject Information Access: Signed Object - URI:rsync://rpki-rsync.idnic.net/repo/a63097f0-3978-49ce-b69c-4b20b4dcfb7e/0/B2B48A9C048B51CD133AD0AEE6F5F9EB73DA1685.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a6:4e:aa:46:c3:fe:02:ac:d5:a2:f0:83:32:a2:b1:48:f1:cb: 9b:18:66:6c:dd:c0:8c:47:1a:2b:45:13:36:e6:53:dd:24:f6: 92:ba:86:30:20:39:ab:fd:16:bb:91:29:a6:b0:5f:7e:ea:50: 65:6e:ca:39:90:b3:46:cf:29:c6:12:a4:b7:69:65:60:18:a1: 93:bf:9f:77:00:d2:76:32:64:65:e2:c3:a7:80:94:b6:60:16: 60:db:48:66:81:e3:5f:0f:6d:33:5a:75:18:ae:99:bb:73:b3: 6f:b7:33:e3:3e:62:ac:c9:e7:c7:f3:fb:2f:1e:48:c7:70:2f: 55:35:10:2f:f9:8b:eb:ef:2f:30:c9:b0:b5:e3:27:3a:ee:81: c3:b0:53:0b:95:dd:37:e9:64:6e:74:28:08:5f:80:a5:75:6a: 85:0e:80:24:58:93:9a:bb:33:af:a0:40:1e:92:22:08:ac:a3: c5:f3:c9:24:1b:5e:7a:e5:0e:25:54:3e:57:ab:ee:ff:35:4e: a3:da:3e:38:cc:a0:96:c8:84:ff:0f:d9:2f:69:76:2b:7c:29: 78:cd:5d:82:ce:8a:bf:83:12:d2:b0:d1:cb:33:d8:db:c7:9c: ac:d3:cc:52:2f:0e:17:cd:42:54:cc:17:0d:73:4c:64:c6:c2: 06:ed:ad:c0 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUVOjAkUAjw4535bTPYv8rFQCz1pIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3 M0RBMTY4NTAeFw0yNjA5MjEyMjUwMDBaFw0yNjA5MjMwMjIzMDBaMDMxMTAvBgNV BAMTKEUzQkYzMjczQkYyRUY1MDk0OThDM0EzRkUyRDA1MTdBNTU5OEVBMjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCoSoITiluPv6Dk71FpQmohLSS4 HaOP2+PRj9ZSM9MRGiW3RltkElKFjq4OWOIciOOCWy/2ALI6hzFaEJoldT1y/Zwx C2rSctx3630KT+Wn/7e4erCcOGAgcJIUwm51Br+MiY4UVE7LshvXVQlrSqFuYPl4 usJ4SN/JikEfwtOE5V9bk2OF6h0jZ7oAxLDWwI+HuOmMvRLPG9y1uVONCIoO3jj2 cizrbKENH1aSjYdSZ2AOkvZ4C0k7fUiM0zm28XyKlaJmT6TJ0fkOrkvUai808zDx qqUi8kazsMZO50g3GxRDs6FXHC8OxmMM+8gJ38Svlg3ZoSrWEahur9QjdzunAgMB AAGjggI8MIICODAdBgNVHQ4EFgQU478yc78u9QlJjDo/4tBRelWY6iMwHwYDVR0j BBgwFoAUsrSKnASLUc0TOtCu5vX563PaFoUwDgYDVR0PAQH/BAQDAgeAMIGGBgNV HR8EfzB9MHugeaB3hnVyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8v YTYzMDk3ZjAtMzk3OC00OWNlLWI2OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMw NDhCNTFDRDEzM0FEMEFFRTZGNUY5RUI3M0RBMTY4NS5jcmwwcgYIKwYBBQUHAQEE ZjBkMGIGCCsGAQUFBzAChlZyc3luYzovL3Jwa2ktcnN5bmMuaWRuaWMubmV0L3Jl cG8vSUROSUMvMS9CMkI0OEE5QzA0OEI1MUNEMTMzQUQwQUVFNkY1RjlFQjczREEx Njg1LmNlcjCBlAYIKwYBBQUHAQsEgYcwgYQwgYEGCCsGAQUFBzALhnVyc3luYzov L3Jwa2ktcnN5bmMuaWRuaWMubmV0L3JlcG8vYTYzMDk3ZjAtMzk3OC00OWNlLWI2 OWMtNGIyMGI0ZGNmYjdlLzAvQjJCNDhBOUMwNDhCNTFDRDEzM0FEMEFFRTZGNUY5 RUI3M0RBMTY4NS5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBAKZOqkbD/gKs1aLwgzKisUjxy5sYZmzdwIxH GitFEzbmU90k9pK6hjAgOav9FruRKaawX37qUGVuyjmQs0bPKcYSpLdpZWAYoZO/ n3cA0nYyZGXiw6eAlLZgFmDbSGaB418PbTNadRiumbtzs2+3M+M+YqzJ58fz+y8e SMdwL1U1EC/5i+vvLzDJsLXjJzrugcOwUwuV3TfpZG50KAhfgKV1aoUOgCRYk5q7 M6+gQB6SIgiso8XzySQbXnrlDiVUPler7v81TqPaPjjMoJbIhP8P2S9pdit8KXjN XYLOir+DEtKw0csz2NvHnKzTzFIvDhfNQlTMFw1zTGTGwgbtrcA= -----END CERTIFICATE-----Generated at Tue Sep 22 07:44:00 2026 by rpki-client